…actively exploited in attacks, one of which has also been abused by ransomware gangs. Test every layer before attackers do Security teams log 54% of successful attacks and alert on just 14…
…Nightmare Eclipse published a proof-of-concept (PoC) exploit hours after Microsoft released its July 2026 Patch Tuesday updates, saying that it abuses a security vulnerability in the Windows User Profile Service…
…to Russia's Foreign Intelligence Service) were targeting vulnerable Zimbra servers by exploiting a security issue previously abused to steal email account credentials . More recently, in March, Seqrite Labs researchers also revealed…
…in the wild, CISA has added 14 SAP security flaws to its Known Exploited Vulnerabilities catalog in recent years, including two that were abused in ransomware attacks. Most recently, multiple official SAP…
Why the browser is now the front line for AI security Sponsored by Push Security June 2, 2026 10:30 AM Security teams are staring at two AI problems at once. Adversaries…
…They can abuse this security flaw "to compromise the server, read every repository on the instance (including other users' private repos), dump credentials (password hashes, API tokens, SSH keys, 2FA secrets), pivot…
…Over the past year, hackers have used improperly secured machine keys in ViewState deserialization attacks targeting web platforms for various products. In March last year, threat actors abused a hardcoded machine key…
…The researcher also leaked GreenPlasma , a zero-day privilege-escalation security issue that attackers can abuse to obtain a SYSTEM shell, and UnDefend , another zero-day that attackers with standard user permissions…
…The tool has at least eight variants and impersonates various legitimate security products, including Kaspersky, Valorant, Javelin, and WatchDog. The gang is using a suite of EDR killers, the most frequently used…
…Push Security says the campaign reflects a broader trend of attackers abusing legitimate invitation and notification features built into SaaS platforms. Unlike normal phishing campaigns, these invitations originate from the platform's…
